Article Content

The Endpoint Server shows the status as yellow in health and wellness for the endpoint service only, and in the UI when navigating to the Investigate>Hosts page it shows the Endpoint Server as offline.

Cause

The cause of this issue is the config server. The mongodb field gets cleared (possibly during a reboot of endpoint) and upon orchestration, it updates the mongodb to connect to from the endpoint servers own mongodb to the ESA IP address instead of endpoints. This causes the connection to the ESA mongodb to be rejected and shows the endpoint server offline in some investigate pages.